Enforcing jurisdiction
France · Geography does not establish applicable law.
Confirmed applicable legislation
No confirmed legal basis recorded.
Privacy topics

Association – €10,000 Fine (France, 2024)

€10,000Commission Nationale de l'Informatique et des Libertés25 May 2024France
final
Fine

Privacy enforcement record

This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.

An association in France was fined €10,000 for failing to protect personal data and not following rules about data minimization. This violation shows how important it is for organizations to keep personal information secure and to inform users about their data practices. Such actions can lead to significant financial penalties.

What happened

The association lacked adequate data security and did not comply with the principle of data minimization.

Who was affected

Individuals whose personal data was not adequately protected by the association.

What the authority found

The French DPA determined that the association failed to meet data security standards and did not provide necessary information to users.

Why this matters

This ruling highlights the critical need for organizations to implement strong data security measures and to be transparent about their data handling practices. It serves as a warning that neglecting these responsibilities can result in hefty fines.

Source checks

Linked-source text retrieved.

Review needed — 14 March 2026.

Processing notes: articles corrected, date discrepancy.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

The French DPA has fined an association EUR 10,000 due to a lack of data security, non-compliance with the principle of data minimisation and a failure to comply with its information obligations under the GDPR.

Details

Fine Date

25 May 2024

Authority

Commission Nationale de l'Informatique et des Libertés

Fine Amount

€10,000

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. Association - France (2024). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: